DSA-2021-080: Dell PowerEdge VRTX Security Update for a Weak Password Encryption Vulnerability
Shrnutí: Dell PowerEdge VRTX remediation is available for a weak password encryption vulnerability that may be exploited by malicious users to compromise the affected system.
Tento článek se vztahuje na
Tento článek se nevztahuje na
Tento článek není vázán na žádný konkrétní produkt.
V tomto článku nejsou uvedeny všechny verze produktu.
Vliv
High
Podrobnosti
| Proprietary Code CVE | Description | CVSS Base Score | CVSS Vector String |
| CVE-2021-21507 | Dell Networking X-Series firmware versions prior to 3.0.1.8 and Dell PowerEdge VRTX Switch Module firmware versions prior to 2.0.0.82 contain a Weak Password Encryption Vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable system with privileges of the compromised account. | 8.8 | CVSS:3.1(AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) |
For information regarding the X-Series remediation, see KB article 185250: DSA-2021-017: Dell Networking Security Update for a Weak Password Encryption Vulnerability
| Proprietary Code CVE | Description | CVSS Base Score | CVSS Vector String |
| CVE-2021-21507 | Dell Networking X-Series firmware versions prior to 3.0.1.8 and Dell PowerEdge VRTX Switch Module firmware versions prior to 2.0.0.82 contain a Weak Password Encryption Vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable system with privileges of the compromised account. | 8.8 | CVSS:3.1(AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) |
For information regarding the X-Series remediation, see KB article 185250: DSA-2021-017: Dell Networking Security Update for a Weak Password Encryption Vulnerability
Dotčené produkty a náprava
| Product | Affected Versions | Updated Versions | Link to Update |
| Dell PowerEdge VRTX | VRTX 1GbE Switch Module (R1-2401) firmware versions prior to 2.0.0.82 | 2.0.0.82 | https://www.dell.com/support/home/en-us/drivers/DriversDetails?driverId=4H24H |
| Dell PowerEdge VRTX | VRTX Switch (R1-2210) firmware versions prior to 2.0.0.82 |
2.0.0.82 | https://www.dell.com/support/home/en-us/drivers/DriversDetails?driverId=94P89 |
| Product | Affected Versions | Updated Versions | Link to Update |
| Dell PowerEdge VRTX | VRTX 1GbE Switch Module (R1-2401) firmware versions prior to 2.0.0.82 | 2.0.0.82 | https://www.dell.com/support/home/en-us/drivers/DriversDetails?driverId=4H24H |
| Dell PowerEdge VRTX | VRTX Switch (R1-2210) firmware versions prior to 2.0.0.82 |
2.0.0.82 | https://www.dell.com/support/home/en-us/drivers/DriversDetails?driverId=94P89 |
Historie změn
| Revision | Date | Description |
| 1.0 | 2021-04-14 | Initial Release |
| 1.1 | 2021-06-10 | Acknowledgments Updated |
Přijetí
Dell Technologies would like to thank Ken Pyle for his contributions.
Související informace
Právní upozornění
Dotčené produkty
POWEREDGE VRTX, Product Security InformationVlastnosti článku
Číslo článku: 000185252
Typ článku: Dell Security Advisory
Poslední úprava: 22 lis 2021
Najděte odpovědi na své otázky od ostatních uživatelů společnosti Dell
Služby podpory
Zkontrolujte, zda se na vaše zařízení vztahují služby podpory.